Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/1FIC0nlvvs7nCXCKFY67-y-Tcx4.roa
File: 1FIC0nlvvs7nCXCKFY67-y-Tcx4.roa (raw, json)
Hash identifier: RQASeiaMoVDZNGhkIy9OUB5XmVipcRP+d1vVqckV06Q=
Subject key identifier: D4:52:02:D2:79:6F:BE:CE:E7:09:70:8A:15:8E:BB:FB:2F:93:73:1E
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 0199FD13D3A93A12CA99F483C850837E77FF
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/1FIC0nlvvs7nCXCKFY67-y-Tcx4.roa
Signing time: Sun 19 Oct 2025 15:25:58 +0000
ROA not before: Sun 19 Oct 2025 15:25:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213981
IP address blocks: 212.104.142.0/24 maxlen: 24
2001:3a40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:13:d3:a9:3a:12:ca:99:f4:83:c8:50:83:7e:77:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Oct 19 15:25:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d45202d2796fbecee709708a158ebbfb2f93731e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:c1:e0:aa:b2:9e:dc:b8:44:f6:71:6a:b5:
ec:98:12:50:35:7f:0d:44:f8:88:96:15:cf:ef:6d:
43:3a:f7:fa:a3:9a:4a:59:33:fb:6f:24:73:91:fe:
c8:b1:bd:fe:5f:2e:40:18:3f:4d:8b:1d:a3:ed:df:
e7:c6:d7:28:74:79:57:b1:98:63:73:51:59:46:47:
ef:5e:fb:33:18:fd:fa:28:5e:88:c0:90:28:67:d3:
c1:9d:1e:17:75:7c:29:e6:f5:e2:5f:e2:93:f6:70:
c2:6d:5e:39:ed:c7:57:c8:15:94:b1:7d:a0:a8:5c:
16:8a:aa:6c:17:49:f0:27:ee:32:b4:ba:7c:cc:32:
5b:e2:7a:33:9c:f7:05:d8:2f:d1:88:cd:fd:3d:ab:
1f:4d:eb:39:da:b3:74:a8:01:38:bd:a8:4d:3e:e1:
23:7f:ac:fd:c4:17:28:98:4f:05:b2:27:dc:d5:1a:
44:7d:b9:88:03:cb:df:42:50:a5:6d:55:e6:ff:86:
20:2b:28:bc:3b:40:1a:88:93:c3:41:40:36:13:05:
46:12:97:0f:82:4b:38:4c:5d:5b:89:52:4a:72:ae:
6f:30:c0:13:9f:a9:9e:72:9c:a4:8b:da:20:7f:e0:
5d:68:22:83:a8:e0:ee:b9:b1:6c:7b:bd:f4:ca:c9:
03:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:52:02:D2:79:6F:BE:CE:E7:09:70:8A:15:8E:BB:FB:2F:93:73:1E
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/1FIC0nlvvs7nCXCKFY67-y-Tcx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.142.0/24
IPv6:
2001:3a40::/29
Signature Algorithm: sha256WithRSAEncryption
57:40:f5:5d:d6:65:35:9f:2d:27:85:94:0c:b6:cf:65:4c:f2:
99:fc:dd:23:12:b5:5f:15:cd:cd:79:a9:74:15:5e:df:57:6c:
8d:5c:6e:52:0a:42:ab:f9:2d:d4:48:b2:72:b0:79:32:11:38:
a5:49:c1:4e:33:db:e5:11:8e:bc:96:39:da:79:aa:d8:3d:5a:
70:37:bb:9a:94:d5:00:49:db:47:4c:c5:a7:d2:2e:81:3f:c4:
0f:5b:c6:7d:fa:03:18:dc:02:2c:30:f8:1a:ef:65:8b:03:6f:
db:96:a6:48:36:ab:3a:f4:95:11:1d:b1:86:c8:25:82:72:7f:
f4:f3:f5:ae:d3:3b:88:09:b8:10:40:2e:bb:1c:2a:2e:dd:51:
c0:93:fc:8f:4b:ea:b5:5c:9e:de:61:48:1c:de:77:a5:ee:9b:
40:6a:8c:a7:3c:14:22:b8:84:bf:2a:60:4e:32:9a:99:fd:3c:
c1:92:7e:e3:17:20:84:ef:03:96:a7:5d:d6:e4:f8:4b:ad:d6:
cf:d4:50:74:d1:c3:29:ef:18:e7:61:ce:0e:b1:05:62:1b:63:
85:1d:c1:ee:53:bc:5d:c6:29:e7:b8:5e:43:aa:4b:0b:e0:92:
fc:67:2f:36:32:96:3a:79:b8:23:71:dd:9b:8c:71:a9:07:46:
fe:f6:e4:de
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZn9E9OpOhLKmfSDyFCDfnf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMGNjM2YzNGJmZDQzYWM1Y2RmNjEwMzdiM2QxNmM5Njdk
NzMyMzcwHhcNMjUxMDE5MTUyNTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDUyMDJkMjc5NmZiZWNlZTcwOTcwOGExNThlYmJmYjJmOTM3MzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq63B4Kqynty4RPZxarXsmBJQNX8N
RPiIlhXP721DOvf6o5pKWTP7byRzkf7Isb3+Xy5AGD9Nix2j7d/nxtcodHlXsZhj
c1FZRkfvXvszGP36KF6IwJAoZ9PBnR4XdXwp5vXiX+KT9nDCbV457cdXyBWUsX2g
qFwWiqpsF0nwJ+4ytLp8zDJb4noznPcF2C/RiM39PasfTes52rN0qAE4vahNPuEj
f6z9xBcomE8Fsifc1RpEfbmIA8vfQlClbVXm/4YgKyi8O0AaiJPDQUA2EwVGEpcP
gks4TF1biVJKcq5vMMATn6mecpyki9ogf+BdaCKDqODuubFse730yskDaQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNRSAtJ5b77O5wlwihWOu/svk3MeMB8GA1UdIwQY
MBaAFEIMw/NL/UOsXN9hA3s9Fsln1zI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYt
NTkzZDBiYjc4YmU2LzEvMUZJQzBubHZ2czduQ1hDS0ZZNjcteS1UY3g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYtNTkzZDBiYjc4YmU2
LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1GiOMA0E
AgACMAcDBQMgATpAMA0GCSqGSIb3DQEBCwUAA4IBAQBXQPVd1mU1ny0nhZQMts9l
TPKZ/N0jErVfFc3Neal0FV7fV2yNXG5SCkKr+S3USLJysHkyETilScFOM9vlEY68
ljnaearYPVpwN7ualNUASdtHTMWn0i6BP8QPW8Z9+gMY3AIsMPga72WLA2/blqZI
Nqs69JURHbGGyCWCcn/08/Wu0zuICbgQQC67HCou3VHAk/yPS+q1XJ7eYUgc3nel
7ptAaoynPBQiuIS/KmBOMpqZ/TzBkn7jFyCE7wOWp13W5PhLrdbP1FB00cMp7xjn
Yc4OsQViG2OFHcHuU7xdxinnuF5DqksL4JL8Zy82MpY6ebgjcd2bjHGpB0b+9uTe
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:03 2025 by rpki-client